Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
File:                     jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft (raw, json)
Hash identifier:          CikOxnqdQTKCiLQPwB/T1bcPUOGdcvyvmGo7+UqqHjs=
Subject key identifier:   06:9A:51:7F:0E:99:33:85:EE:A6:F4:4F:62:20:57:3F:7C:E8:EE:40
Authority key identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
Certificate issuer:       /CN=8e79cef458de50392e3c02b69182f34c60148d24
Certificate serial:       01A00326D94610346D8593C0C2F70353F358
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
Manifest number:          03D1
Signing time:             Sat 15 Aug 2026 02:01:12 +0000
Manifest this update:     Sat 15 Aug 2026 02:01:12 +0000
Manifest next update:     Sun 16 Aug 2026 02:01:12 +0000
Files and hashes:         1: _c6xx4G9gRqlWT599mmQOoWoW50.roa (hash: c/9VJ4HKTN9Q4dyySRrDW6GfcNhn9tZLqvs7ju71Tx8=)
                          2: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl (hash: ybYv9/ui99YHHGoOXtgUAP0TcRWzxnL6sQUBRDUzxcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:d9:46:10:34:6d:85:93:c0:c2:f7:03:53:f3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e79cef458de50392e3c02b69182f34c60148d24
        Validity
            Not Before: Aug 15 02:01:12 2026 GMT
            Not After : Aug 16 02:01:12 2026 GMT
        Subject: CN=069a517f0e993385eea6f44f6220573f7ce8ee40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5a:c0:76:90:16:a6:ac:ac:c9:7b:a9:fd:9f:
                    14:c3:e7:21:83:8c:9a:ad:05:3d:c4:7d:90:94:72:
                    35:00:fa:7b:7e:dc:ae:bf:2b:4e:ea:c0:e0:e7:40:
                    37:65:42:50:0a:f3:a1:22:dd:b5:de:e7:60:cc:42:
                    e6:b5:fd:71:c9:ba:1b:20:f8:99:2e:fa:33:76:98:
                    8f:3a:7f:30:4f:a2:68:f0:e7:5c:97:91:32:90:8a:
                    b2:74:f1:6d:86:26:2a:35:b2:70:87:bc:25:4f:d9:
                    41:ac:3f:6a:0e:1b:b8:81:5e:f4:bb:f8:c3:51:53:
                    e6:25:9b:92:13:1b:43:06:e1:9f:df:66:04:a5:05:
                    6e:37:86:af:5e:73:ab:c4:21:ee:8f:83:c4:5d:37:
                    ab:a1:e9:5c:98:ac:7a:55:ba:c9:fc:5e:70:1c:b8:
                    33:a2:e8:6e:e9:14:4a:2d:86:22:d0:7e:60:ed:6c:
                    9c:21:16:20:ea:32:6f:14:ed:48:be:23:e1:73:67:
                    43:24:9f:d5:7f:60:cc:ee:7a:9d:c1:39:77:b4:41:
                    79:d9:01:7a:69:9a:95:75:85:26:34:a4:ad:6b:05:
                    7c:dd:4a:d9:08:ed:9c:4e:f8:80:d0:70:22:47:df:
                    69:55:15:57:4c:5a:c5:db:b3:89:87:f9:a4:ff:a1:
                    5c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9A:51:7F:0E:99:33:85:EE:A6:F4:4F:62:20:57:3F:7C:E8:EE:40
            X509v3 Authority Key Identifier:
                keyid:8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:6f:d5:46:75:fd:86:f0:7a:14:d3:c2:4f:77:70:5a:2c:b7:
         7c:3d:06:40:50:41:42:d7:b6:3b:8f:29:a2:c1:8e:2c:2f:dd:
         e4:5a:57:d1:76:65:d8:9a:68:aa:1d:0f:96:7f:3f:b6:9b:c5:
         48:d1:ad:48:28:24:1a:8a:d7:8b:66:f3:95:1e:16:dd:e4:72:
         8a:37:32:35:c3:d5:cd:18:75:83:35:47:6e:ab:a1:85:1d:88:
         7b:6a:d5:a1:36:c7:ef:a6:59:d6:09:a6:36:61:7f:75:00:d8:
         c4:32:aa:a1:44:24:d3:eb:8a:4e:b4:9b:78:87:d7:0f:56:2b:
         4d:bc:4b:23:4e:06:ba:36:e6:ed:10:a9:9d:0f:e5:5d:39:4a:
         8b:19:49:59:41:46:b9:0c:37:df:f6:52:bb:50:7f:02:44:38:
         65:7b:dc:4b:2b:ac:49:21:14:b4:b2:c6:b4:d7:10:9b:1b:a7:
         91:6d:3f:0c:aa:69:78:f1:d1:dc:22:cf:c4:3d:00:db:5f:3c:
         f2:cb:4b:1c:c0:b4:46:b4:c1:1d:fb:df:dc:c2:2d:c2:67:31:
         cd:57:e4:48:ea:4e:1c:fb:fc:bf:9a:fb:7c:ab:9a:59:e2:32:
         e1:bc:f5:b5:6e:80:1e:d4:4c:db:86:48:fb:de:ec:4b:96:d3:
         51:c1:86:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:24:18 2026 by rpki-client